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AMENDMENTS TO THE CLAIMS 

The following is a complete, marked-up listing of revised claims with a status 
identifier in parenthesis, underlined text indicating insertions, and strike through 
and/or double-bracketed text indicating deletions, 

Listing Op Claims 

1, (Currently Amended) A method of controlling pairing between a removable 
security module and a host apparatus connected to the removable security module, 
the pairing method securing data exchanged between the removable security 
module and the host apparatus by using a unique pairing key, the method 
comprisin gA pairing control method b e tw^e e n a first devic e and a s e cond devace, th e 
pairing control method aiming to s e cur e th e data e xchang e ^iith th e aid of a unique 
pairing k e y, th e pairing control m e thod comprising : 

- verifying the pairing between the removable security module and the host 
apparatu s two devices and using the unique pairing key when the pairing between 
the removable security module and the host apparatus t wo devices has been already 
carried out, wherein, when the pairin g paring between the removable security 
module and the host apparatu s two d e vic e s has not been carried out, the method 
includes, 

- searching for a fi-ee location among the-locations reserved for the 
unique pairing key in the removable security module first d e vic e and wherein, when 
a free location is absent, the method further includes performing at least one of 

reading an activity counter associated with each location of the 
removable security module first d e vic e, said activity coimter being incremented each 
time a location is used for pairing, and finding a lowest value activity counter to 
determine the location to be used for a pairing procedure, and 
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reading a chronology counter associated with each location of 

the removable secioritv modulefi fst — d e vic e, said chronology counter being 

incremented each time a location is used for pairing, and finding a lowest value 

chronology counter to determine the location to be used for a pairing procedure, 

- initiating the pairing procedure by transmitting a cr5qjtogram 
contained in the host apparatu s o e cond de\ic e. the cryptogram including an 
identifier identifying the host aDparatu s o e cond de\ic e and the unique pairing key. 
and the cryptogram being encrypted by a secret key common to a plurality of 
removable security modules, the plurality of removable securitv modules including 
the removable security module all th e first d e vices , 

- decrsqjting the cryptogram with the removable securitv modulefe =&t 
devic e and extracting the identifier of the host apparatu s second d e vic e and the 
unique pairing key fi-om the cryptogram, and 

- storing the unique pairing key in the removable security modulefe st 
devic e, the unique pairing key used to pair with the host apparatus second devic e. 

2. (Currently Amended) The method according to claim 1, wherein the unique 
pairing key is based on the identifier of the host apparatu s s e cond device and on the 
data of the removable security module fi rst d e vice . 

3. (Currently Amended) The method according to claim 1, wherein the crsrptogram 
is stored in the removable security module first devic e and encrypted with a secret 
key common to a plurality of host apparatuses s e cond devic e s . 

4. (CanceUed) 
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5- (Currently Amended) The method according to claim 1. wherein pairing is 

conditioned by the introduction of a secret code transmitted to the removable 

security module flrGt devic e and verified by said removable security modulefe st 

devic e. 

6. (Currently Amended) The method according to claim 5, wherein the secret code 
belongs to and Is imlque to each removable security modul e first d e vice . 

7. (Previously Presented) The method according to claim 5, wherein the required 
secret code is different In each pairing. 

8. (Currently Amended) The method according to claim 5 further comprising: 

- transmitting a unique identifier of the removable security modulefe st 
d e vic e and the Identifier of the host apparatus s e cond device to a management 
cente r c e ntr e. 

- verifying the conformity of the pairing and calculating, by means of the 
management cente r centre . a corresponding secret code on the basis of the two 
identifiers, 

- transmitting the secret code to a user, 

- initiating the pairing and requesting the introduction of the secret code, by 
means of the removable security module fi rst devic e. 

- calculating by means of the removable security module firot d e vaco the 
necessary secret code on the basis of the identifiers of the removable security 
modulefi fst and the host apparatu s s e cond d e vlceo . 

- comparing the calculated code with a code introduced by the user. 

- accepting the pairing if the two codes are identical. 
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9. (Currently Amended) The method according to claim 8 further comprising, 
determining the new secret code on the basis of the twe-identtfiers of the removable 
security module and the host apparatus and of an index that represents the 
number of pairings previously carried out, whereas the removable security 
module first d e vic e stores this index in its memory. 

10. (New) A method of controlling pairing between a removable security module and 
a host apparatus connected to the removable security module, the pairing method 
securing data exchanged between the removable security module and the host 
apparatus by using a unique pairing key, the method comprising: 

- verifying the pairing between the removable security module and the host 
apparatus and using the imique pairing key when the pairing between the 
removable security module and the host apparatus has been already carried out, 
and when the pairing between the removable security module and the host 
apparatus has not been carried out: 

- searching for a free location among locations reserved for the unique 
pairing key in the removable security module and wherein, when a free location is 
absent, the method further includes performing at least one of 

reading an activity counter associated with each location of the 
removable security module, said activity counter being incremented each time a 
location is used for pairing, and finding a lowest value activity coimter to determine 
the location to be used for a pairing procedure, and 

reading a chronology counter associated with each location of 
the removable security module, said chronology counter being incremented each 
time a location is used for pairing, and finding a lowest value chronology counter to 
determine the location to be used for a pairing procedure. 
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- initiating the pairing procedure by transmitting a cryptogram 
contained in the host apparatus, the cryptogram including an identifier identifying 
the host apparatus and the imique pairing key. and the cryptogram being 
encrypted by a secret key common to a plurality of removable security modules, the 
plurality of removable security modules including the removable security module. 

- decrypting the cryptogram with the removable security module and 
extracting the identifier of the host apparatus and the unique pairing key firom the 
cryptogram, and 

- storing the unique pairing key in the removable security module, the 
unique pairing key used to pair with the host apparatus. 

**♦ END CLAIM LISTING ** 



6 



